CVE-2013-4229: XSS
Published Aug 21, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the Monster Menus module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated users with permissions to add pages to inject arbitrary web script or HTML via a title in the page settings.
Affected Software
28 affected components
Monster Menus Module Project Monster Menus=7.x-1.0
Monster Menus Module Project Monster Menus=7.x-1.1
Monster Menus Module Project Monster Menus=7.x-1.2
Monster Menus Module Project Monster Menus=7.x-1.3
Monster Menus Module Project Monster Menus=7.x-1.4
Monster Menus Module Project Monster Menus=7.x-1.5
Monster Menus Module Project Monster Menus=7.x-1.6
Monster Menus Module Project Monster Menus=7.x-1.7
Monster Menus Module Project Monster Menus=7.x-1.8
Monster Menus Module Project Monster Menus=7.x-1.9
Monster Menus Module Project Monster Menus=7.x-1.10
Monster Menus Module Project Monster Menus=7.x-1.11
Monster Menus Module Project Monster Menus=7.x-1.x-dev
Drupal Drupal
All of the following
Any of the following
Monster Menus Project Monster Menus=7.x-1.0
Monster Menus Project Monster Menus=7.x-1.1
Monster Menus Project Monster Menus=7.x-1.2
Monster Menus Project Monster Menus=7.x-1.3
Monster Menus Project Monster Menus=7.x-1.4
Monster Menus Project Monster Menus=7.x-1.5
Monster Menus Project Monster Menus=7.x-1.6
Monster Menus Project Monster Menus=7.x-1.7
Monster Menus Project Monster Menus=7.x-1.8
Monster Menus Project Monster Menus=7.x-1.9
Monster Menus Project Monster Menus=7.x-1.10
Monster Menus Project Monster Menus=7.x-1.11
Monster Menus Project Monster Menus=7.x-1.x-dev
Drupal Drupal
Remediation
Patch Available
Event History
Aug 21, 2013
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-4229?
CVE-2013-4229 is considered a medium severity cross-site scripting vulnerability.
2
How do I fix CVE-2013-4229?
To fix CVE-2013-4229, upgrade the Monster Menus module to version 7.x-1.12 or later.
3
What versions of Monster Menus are affected by CVE-2013-4229?
CVE-2013-4229 affects Monster Menus versions 7.x-1.0 through 7.x-1.11.
4
Who can exploit CVE-2013-4229?
Remote authenticated users with permissions to add pages can exploit CVE-2013-4229.
5
What is the impact of CVE-2013-4229?
The impact of CVE-2013-4229 allows attackers to inject arbitrary web scripts or HTML into affected pages.